sepolicy: Allow init to create xcap sockets
I auditd : type=1400 audit(0.0:191): avc: denied { create } for comm="init" name="vendor.xcap" scontext=u:r:init:s0 tcontext=u:object_r:socket_device:s0 tclass=sock_file permissive=0 Change-Id: I44fade622638a8ea64afcb6569515ca2c231c84c
This commit is contained in:
parent
8c706294c1
commit
6c1dc1cc06
@ -642,6 +642,8 @@ type thermal_hal_socket, file_type;
|
||||
# thermal core socket file
|
||||
type thermal_socket, file_type;
|
||||
|
||||
type xcap_socket, file_type;
|
||||
|
||||
# Data : 2021/08/24
|
||||
# Operaton: S development
|
||||
# Purpose: Add permission for node /proc/dma_heap
|
||||
|
@ -402,6 +402,8 @@
|
||||
/dev/socket/thermal_socket(/.*)? u:object_r:thermal_socket:s0
|
||||
/dev/socket/thermal_hal_socket(/.*)? u:object_r:thermal_hal_socket:s0
|
||||
|
||||
/dev/socket/vendor.xcap(/.*)? u:object_r:xcap_socket:s0
|
||||
|
||||
/dev/stpant(/.*)? u:object_r:stpant_device:s0
|
||||
/dev/stpbt(/.*)? u:object_r:stpbt_device:s0
|
||||
/dev/fw_log_bt u:object_r:fw_log_bt_device:s0
|
||||
|
@ -146,3 +146,4 @@ domain_auto_trans(init, postinstall_file, update_engine)
|
||||
allow init sysfs_mtk_core_ctl:dir r_dir_perms;
|
||||
allow init sysfs_mtk_core_ctl:file rw_file_perms;
|
||||
|
||||
allow init xcap_socket:sock_file create_file_perms;
|
||||
|
Loading…
x
Reference in New Issue
Block a user